Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa
File:                     38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa (raw, json)
Hash identifier:          HptpPa2dv1FAheV9iLCm0Z4eHfFgzzoUYJHqaShcqbc=
Subject key identifier:   2A:83:9D:82:AC:09:E2:2D:63:9F:1F:0A:57:87:7D:6B:EB:6E:D1:2B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584D62C0A586D012C58B7664F980
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa
Signing time:             Fri 03 Apr 2026 16:58:57 +0000
ROA not before:           Fri 03 Apr 2026 16:58:57 +0000
ROA not after:            Thu 02 Jul 2026 16:58:57 +0000
asID:                     3320
IP address blocks:        136.0.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:c0:a5:86:d0:12:c5:8b:76:64:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr  3 16:58:57 2026 GMT
            Not After : Jul  2 16:58:57 2026 GMT
        Subject: CN=3ea47c05-84c5-459b-8e6c-20dd9dcfa564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:f9:1f:59:b4:d6:38:70:40:f1:ff:cc:5b:
                    b6:30:14:84:67:91:52:4d:a6:9b:5a:1c:b8:14:c6:
                    4e:ee:52:ad:9a:cc:0c:e5:82:a8:86:43:b3:34:a5:
                    0d:ee:33:28:9f:79:3e:31:04:1b:f4:23:fa:53:a5:
                    e1:e7:76:73:9e:0f:1b:08:ca:6f:0d:5b:62:d2:c4:
                    47:ee:e5:9a:de:83:cd:fe:69:b1:9d:50:82:64:a3:
                    72:21:a9:a4:2b:fb:c7:39:c1:f6:b2:cf:7a:f9:9d:
                    d8:76:53:31:a2:8d:83:06:5b:85:17:39:cd:ef:f7:
                    88:6c:78:60:ca:34:cb:9d:4b:31:e4:7c:bf:d1:9f:
                    be:2f:da:27:ab:51:97:88:d8:32:6b:ed:18:6a:9d:
                    2f:06:31:e5:2e:3b:00:f9:94:2f:64:c3:74:33:62:
                    d7:da:6f:a1:9d:e8:57:7b:83:9e:f4:32:36:26:09:
                    42:c9:ef:08:10:02:41:76:2b:22:dc:c4:1b:9b:3a:
                    26:c7:d7:28:14:ad:36:d9:54:b0:9a:19:08:85:66:
                    15:bb:73:d7:08:80:1a:b8:54:15:27:a8:a9:6e:48:
                    7a:82:60:be:56:6b:bf:2c:40:75:f4:3b:53:2e:fa:
                    cd:c8:17:a2:a2:06:fe:7c:19:4e:3e:b9:b3:06:ea:
                    62:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:83:9D:82:AC:09:E2:2D:63:9F:1F:0A:57:87:7D:6B:EB:6E:D1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38a31c91-ebf9-3c10-9bf5-c5a3c741adbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:f0:a9:92:3d:9e:cd:b4:c9:23:57:e5:b4:8d:14:15:20:
         52:a1:21:e3:94:87:ac:e1:f8:83:61:20:db:de:c3:eb:1b:d4:
         84:80:c6:bf:65:31:ba:e7:de:45:c7:8e:90:a8:2c:f4:9f:9e:
         75:e4:42:b2:5d:bf:22:de:45:c8:57:96:fd:a4:dc:ae:a8:97:
         51:d4:b4:87:db:49:57:10:eb:3e:24:c9:ca:55:c2:fd:e4:bb:
         58:20:08:20:b0:93:41:91:6a:cf:fc:56:e6:d3:dc:15:77:61:
         b8:8e:33:8e:83:95:8b:4c:97:6e:ea:76:bd:8f:82:96:e9:d1:
         a6:b7:ef:54:15:d7:39:04:e0:d3:b5:50:b2:e1:2c:61:b3:a2:
         84:c1:4e:99:13:75:c2:a1:a0:45:99:6e:33:9c:ac:20:83:36:
         fd:37:b4:cc:c2:3f:1d:db:bf:96:c5:c9:02:37:23:14:48:ea:
         e6:68:af:cc:b0:ca:d0:15:7f:8f:1d:78:06:25:3f:91:5d:e6:
         8a:f7:84:f8:7a:08:29:20:18:e6:cd:0c:c7:06:f0:95:20:ac:
         52:3a:df:1e:0e:0f:ad:75:dc:3a:9a:25:94:f0:af:04:6d:c2:
         6a:c9:38:d3:c2:d6:06:f4:76:92:f7:94:b7:1a:27:df:a9:99:
         03:1e:d9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 09:28:31 2026 by rpki-client